VirtualBox

source: vbox/trunk/src/libs/openssl-3.0.3/crypto/dsa/dsa_ameth.c@ 96662

Last change on this file since 96662 was 94404, checked in by vboxsync, 3 years ago

libs/openssl: Update to 3.0.2 and switch to it, bugref:10128

File size: 13.5 KB
Line 
1/*
2 * Copyright 2006-2022 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10/*
11 * DSA low level APIs are deprecated for public use, but still ok for
12 * internal use.
13 */
14#include "internal/deprecated.h"
15
16#include <stdio.h>
17#include <openssl/x509.h>
18#include <openssl/asn1.h>
19#include <openssl/bn.h>
20#include <openssl/core_names.h>
21#include <openssl/param_build.h>
22#include "internal/cryptlib.h"
23#include "crypto/asn1.h"
24#include "crypto/dsa.h"
25#include "crypto/evp.h"
26#include "internal/ffc.h"
27#include "dsa_local.h"
28
29static int dsa_pub_decode(EVP_PKEY *pkey, const X509_PUBKEY *pubkey)
30{
31 const unsigned char *p, *pm;
32 int pklen, pmlen;
33 int ptype;
34 const void *pval;
35 const ASN1_STRING *pstr;
36 X509_ALGOR *palg;
37 ASN1_INTEGER *public_key = NULL;
38
39 DSA *dsa = NULL;
40
41 if (!X509_PUBKEY_get0_param(NULL, &p, &pklen, &palg, pubkey))
42 return 0;
43 X509_ALGOR_get0(NULL, &ptype, &pval, palg);
44
45 if (ptype == V_ASN1_SEQUENCE) {
46 pstr = pval;
47 pm = pstr->data;
48 pmlen = pstr->length;
49
50 if ((dsa = d2i_DSAparams(NULL, &pm, pmlen)) == NULL) {
51 ERR_raise(ERR_LIB_DSA, DSA_R_DECODE_ERROR);
52 goto err;
53 }
54
55 } else if ((ptype == V_ASN1_NULL) || (ptype == V_ASN1_UNDEF)) {
56 if ((dsa = DSA_new()) == NULL) {
57 ERR_raise(ERR_LIB_DSA, ERR_R_MALLOC_FAILURE);
58 goto err;
59 }
60 } else {
61 ERR_raise(ERR_LIB_DSA, DSA_R_PARAMETER_ENCODING_ERROR);
62 goto err;
63 }
64
65 if ((public_key = d2i_ASN1_INTEGER(NULL, &p, pklen)) == NULL) {
66 ERR_raise(ERR_LIB_DSA, DSA_R_DECODE_ERROR);
67 goto err;
68 }
69
70 if ((dsa->pub_key = ASN1_INTEGER_to_BN(public_key, NULL)) == NULL) {
71 ERR_raise(ERR_LIB_DSA, DSA_R_BN_DECODE_ERROR);
72 goto err;
73 }
74
75 dsa->dirty_cnt++;
76 ASN1_INTEGER_free(public_key);
77 EVP_PKEY_assign_DSA(pkey, dsa);
78 return 1;
79
80 err:
81 ASN1_INTEGER_free(public_key);
82 DSA_free(dsa);
83 return 0;
84
85}
86
87static int dsa_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
88{
89 DSA *dsa;
90 int ptype;
91 unsigned char *penc = NULL;
92 int penclen;
93 ASN1_STRING *str = NULL;
94 ASN1_INTEGER *pubint = NULL;
95 ASN1_OBJECT *aobj;
96
97 dsa = pkey->pkey.dsa;
98 if (pkey->save_parameters
99 && dsa->params.p != NULL
100 && dsa->params.q != NULL
101 && dsa->params.g != NULL) {
102 str = ASN1_STRING_new();
103 if (str == NULL) {
104 ERR_raise(ERR_LIB_DSA, ERR_R_MALLOC_FAILURE);
105 goto err;
106 }
107 str->length = i2d_DSAparams(dsa, &str->data);
108 if (str->length <= 0) {
109 ERR_raise(ERR_LIB_DSA, ERR_R_MALLOC_FAILURE);
110 goto err;
111 }
112 ptype = V_ASN1_SEQUENCE;
113 } else
114 ptype = V_ASN1_UNDEF;
115
116 pubint = BN_to_ASN1_INTEGER(dsa->pub_key, NULL);
117
118 if (pubint == NULL) {
119 ERR_raise(ERR_LIB_DSA, ERR_R_MALLOC_FAILURE);
120 goto err;
121 }
122
123 penclen = i2d_ASN1_INTEGER(pubint, &penc);
124 ASN1_INTEGER_free(pubint);
125
126 if (penclen <= 0) {
127 ERR_raise(ERR_LIB_DSA, ERR_R_MALLOC_FAILURE);
128 goto err;
129 }
130
131 aobj = OBJ_nid2obj(EVP_PKEY_DSA);
132 if (aobj == NULL)
133 goto err;
134
135 if (X509_PUBKEY_set0_param(pk, aobj, ptype, str, penc, penclen))
136 return 1;
137
138 err:
139 OPENSSL_free(penc);
140 ASN1_STRING_free(str);
141
142 return 0;
143}
144
145/*
146 * In PKCS#8 DSA: you just get a private key integer and parameters in the
147 * AlgorithmIdentifier the pubkey must be recalculated.
148 */
149
150static int dsa_priv_decode(EVP_PKEY *pkey, const PKCS8_PRIV_KEY_INFO *p8)
151{
152 int ret = 0;
153 DSA *dsa = ossl_dsa_key_from_pkcs8(p8, NULL, NULL);
154
155 if (dsa != NULL) {
156 ret = 1;
157 EVP_PKEY_assign_DSA(pkey, dsa);
158 }
159
160 return ret;
161}
162
163static int dsa_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
164{
165 ASN1_STRING *params = NULL;
166 ASN1_INTEGER *prkey = NULL;
167 unsigned char *dp = NULL;
168 int dplen;
169
170 if (pkey->pkey.dsa == NULL|| pkey->pkey.dsa->priv_key == NULL) {
171 ERR_raise(ERR_LIB_DSA, DSA_R_MISSING_PARAMETERS);
172 goto err;
173 }
174
175 params = ASN1_STRING_new();
176
177 if (params == NULL) {
178 ERR_raise(ERR_LIB_DSA, ERR_R_MALLOC_FAILURE);
179 goto err;
180 }
181
182 params->length = i2d_DSAparams(pkey->pkey.dsa, &params->data);
183 if (params->length <= 0) {
184 ERR_raise(ERR_LIB_DSA, ERR_R_MALLOC_FAILURE);
185 goto err;
186 }
187 params->type = V_ASN1_SEQUENCE;
188
189 /* Get private key into integer */
190 prkey = BN_to_ASN1_INTEGER(pkey->pkey.dsa->priv_key, NULL);
191
192 if (prkey == NULL) {
193 ERR_raise(ERR_LIB_DSA, DSA_R_BN_ERROR);
194 goto err;
195 }
196
197 dplen = i2d_ASN1_INTEGER(prkey, &dp);
198
199 ASN1_STRING_clear_free(prkey);
200 prkey = NULL;
201
202 if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(NID_dsa), 0,
203 V_ASN1_SEQUENCE, params, dp, dplen))
204 goto err;
205
206 return 1;
207
208 err:
209 OPENSSL_free(dp);
210 ASN1_STRING_free(params);
211 ASN1_STRING_clear_free(prkey);
212 return 0;
213}
214
215static int int_dsa_size(const EVP_PKEY *pkey)
216{
217 return DSA_size(pkey->pkey.dsa);
218}
219
220static int dsa_bits(const EVP_PKEY *pkey)
221{
222 return DSA_bits(pkey->pkey.dsa);
223}
224
225static int dsa_security_bits(const EVP_PKEY *pkey)
226{
227 return DSA_security_bits(pkey->pkey.dsa);
228}
229
230static int dsa_missing_parameters(const EVP_PKEY *pkey)
231{
232 DSA *dsa;
233 dsa = pkey->pkey.dsa;
234 return dsa == NULL
235 || dsa->params.p == NULL
236 || dsa->params.q == NULL
237 || dsa->params.g == NULL;
238}
239
240static int dsa_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from)
241{
242 if (to->pkey.dsa == NULL) {
243 to->pkey.dsa = DSA_new();
244 if (to->pkey.dsa == NULL)
245 return 0;
246 }
247 if (!ossl_ffc_params_copy(&to->pkey.dsa->params, &from->pkey.dsa->params))
248 return 0;
249
250 to->pkey.dsa->dirty_cnt++;
251 return 1;
252}
253
254static int dsa_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b)
255{
256 return ossl_ffc_params_cmp(&a->pkey.dsa->params, &b->pkey.dsa->params, 1);
257}
258
259static int dsa_pub_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
260{
261 return BN_cmp(b->pkey.dsa->pub_key, a->pkey.dsa->pub_key) == 0;
262}
263
264static void int_dsa_free(EVP_PKEY *pkey)
265{
266 DSA_free(pkey->pkey.dsa);
267}
268
269static int do_dsa_print(BIO *bp, const DSA *x, int off, int ptype)
270{
271 int ret = 0;
272 const char *ktype = NULL;
273 const BIGNUM *priv_key, *pub_key;
274 int mod_len = 0;
275
276 if (x->params.p != NULL)
277 mod_len = DSA_bits(x);
278
279 if (ptype == 2)
280 priv_key = x->priv_key;
281 else
282 priv_key = NULL;
283
284 if (ptype > 0)
285 pub_key = x->pub_key;
286 else
287 pub_key = NULL;
288
289 if (ptype == 2)
290 ktype = "Private-Key";
291 else if (ptype == 1)
292 ktype = "Public-Key";
293 else
294 ktype = "DSA-Parameters";
295
296 if (priv_key != NULL) {
297 if (!BIO_indent(bp, off, 128))
298 goto err;
299 if (BIO_printf(bp, "%s: (%d bit)\n", ktype, mod_len) <= 0)
300 goto err;
301 } else {
302 if (BIO_printf(bp, "Public-Key: (%d bit)\n", mod_len) <= 0)
303 goto err;
304 }
305
306 if (!ASN1_bn_print(bp, "priv:", priv_key, NULL, off))
307 goto err;
308 if (!ASN1_bn_print(bp, "pub: ", pub_key, NULL, off))
309 goto err;
310 if (!ossl_ffc_params_print(bp, &x->params, off))
311 goto err;
312 ret = 1;
313 err:
314 return ret;
315}
316
317static int dsa_param_decode(EVP_PKEY *pkey,
318 const unsigned char **pder, int derlen)
319{
320 DSA *dsa;
321
322 if ((dsa = d2i_DSAparams(NULL, pder, derlen)) == NULL)
323 return 0;
324
325 dsa->dirty_cnt++;
326 EVP_PKEY_assign_DSA(pkey, dsa);
327 return 1;
328}
329
330static int dsa_param_encode(const EVP_PKEY *pkey, unsigned char **pder)
331{
332 return i2d_DSAparams(pkey->pkey.dsa, pder);
333}
334
335static int dsa_param_print(BIO *bp, const EVP_PKEY *pkey, int indent,
336 ASN1_PCTX *ctx)
337{
338 return do_dsa_print(bp, pkey->pkey.dsa, indent, 0);
339}
340
341static int dsa_pub_print(BIO *bp, const EVP_PKEY *pkey, int indent,
342 ASN1_PCTX *ctx)
343{
344 return do_dsa_print(bp, pkey->pkey.dsa, indent, 1);
345}
346
347static int dsa_priv_print(BIO *bp, const EVP_PKEY *pkey, int indent,
348 ASN1_PCTX *ctx)
349{
350 return do_dsa_print(bp, pkey->pkey.dsa, indent, 2);
351}
352
353static int old_dsa_priv_decode(EVP_PKEY *pkey,
354 const unsigned char **pder, int derlen)
355{
356 DSA *dsa;
357
358 if ((dsa = d2i_DSAPrivateKey(NULL, pder, derlen)) == NULL) {
359 ERR_raise(ERR_LIB_DSA, ERR_R_DSA_LIB);
360 return 0;
361 }
362 dsa->dirty_cnt++;
363 EVP_PKEY_assign_DSA(pkey, dsa);
364 return 1;
365}
366
367static int old_dsa_priv_encode(const EVP_PKEY *pkey, unsigned char **pder)
368{
369 return i2d_DSAPrivateKey(pkey->pkey.dsa, pder);
370}
371
372static int dsa_sig_print(BIO *bp, const X509_ALGOR *sigalg,
373 const ASN1_STRING *sig, int indent, ASN1_PCTX *pctx)
374{
375 DSA_SIG *dsa_sig;
376 const unsigned char *p;
377
378 if (sig == NULL) {
379 if (BIO_puts(bp, "\n") <= 0)
380 return 0;
381 else
382 return 1;
383 }
384 p = sig->data;
385 dsa_sig = d2i_DSA_SIG(NULL, &p, sig->length);
386 if (dsa_sig != NULL) {
387 int rv = 0;
388 const BIGNUM *r, *s;
389
390 DSA_SIG_get0(dsa_sig, &r, &s);
391
392 if (BIO_write(bp, "\n", 1) != 1)
393 goto err;
394
395 if (!ASN1_bn_print(bp, "r: ", r, NULL, indent))
396 goto err;
397 if (!ASN1_bn_print(bp, "s: ", s, NULL, indent))
398 goto err;
399 rv = 1;
400 err:
401 DSA_SIG_free(dsa_sig);
402 return rv;
403 }
404 if (BIO_puts(bp, "\n") <= 0)
405 return 0;
406 return X509_signature_dump(bp, sig, indent);
407}
408
409static int dsa_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
410{
411 switch (op) {
412 case ASN1_PKEY_CTRL_DEFAULT_MD_NID:
413 *(int *)arg2 = NID_sha256;
414 return 1;
415
416 default:
417 return -2;
418 }
419}
420
421static size_t dsa_pkey_dirty_cnt(const EVP_PKEY *pkey)
422{
423 return pkey->pkey.dsa->dirty_cnt;
424}
425
426static int dsa_pkey_export_to(const EVP_PKEY *from, void *to_keydata,
427 OSSL_FUNC_keymgmt_import_fn *importer,
428 OSSL_LIB_CTX *libctx, const char *propq)
429{
430 DSA *dsa = from->pkey.dsa;
431 OSSL_PARAM_BLD *tmpl;
432 const BIGNUM *p = DSA_get0_p(dsa), *g = DSA_get0_g(dsa);
433 const BIGNUM *q = DSA_get0_q(dsa), *pub_key = DSA_get0_pub_key(dsa);
434 const BIGNUM *priv_key = DSA_get0_priv_key(dsa);
435 OSSL_PARAM *params;
436 int selection = 0;
437 int rv = 0;
438
439 if (p == NULL || q == NULL || g == NULL)
440 return 0;
441
442 tmpl = OSSL_PARAM_BLD_new();
443 if (tmpl == NULL)
444 return 0;
445
446 if (!OSSL_PARAM_BLD_push_BN(tmpl, OSSL_PKEY_PARAM_FFC_P, p)
447 || !OSSL_PARAM_BLD_push_BN(tmpl, OSSL_PKEY_PARAM_FFC_Q, q)
448 || !OSSL_PARAM_BLD_push_BN(tmpl, OSSL_PKEY_PARAM_FFC_G, g))
449 goto err;
450 selection |= OSSL_KEYMGMT_SELECT_DOMAIN_PARAMETERS;
451 if (pub_key != NULL) {
452 if (!OSSL_PARAM_BLD_push_BN(tmpl, OSSL_PKEY_PARAM_PUB_KEY,
453 pub_key))
454 goto err;
455 selection |= OSSL_KEYMGMT_SELECT_PUBLIC_KEY;
456 }
457 if (priv_key != NULL) {
458 if (!OSSL_PARAM_BLD_push_BN(tmpl, OSSL_PKEY_PARAM_PRIV_KEY,
459 priv_key))
460 goto err;
461 selection |= OSSL_KEYMGMT_SELECT_PRIVATE_KEY;
462 }
463
464 if ((params = OSSL_PARAM_BLD_to_param(tmpl)) == NULL)
465 goto err;
466
467 /* We export, the provider imports */
468 rv = importer(to_keydata, selection, params);
469
470 OSSL_PARAM_free(params);
471 err:
472 OSSL_PARAM_BLD_free(tmpl);
473 return rv;
474}
475
476static int dsa_pkey_import_from(const OSSL_PARAM params[], void *vpctx)
477{
478 EVP_PKEY_CTX *pctx = vpctx;
479 EVP_PKEY *pkey = EVP_PKEY_CTX_get0_pkey(pctx);
480 DSA *dsa = ossl_dsa_new(pctx->libctx);
481
482 if (dsa == NULL) {
483 ERR_raise(ERR_LIB_DSA, ERR_R_MALLOC_FAILURE);
484 return 0;
485 }
486
487 if (!ossl_dsa_ffc_params_fromdata(dsa, params)
488 || !ossl_dsa_key_fromdata(dsa, params, 1)
489 || !EVP_PKEY_assign_DSA(pkey, dsa)) {
490 DSA_free(dsa);
491 return 0;
492 }
493 return 1;
494}
495
496static int dsa_pkey_copy(EVP_PKEY *to, EVP_PKEY *from)
497{
498 DSA *dsa = from->pkey.dsa;
499 DSA *dupkey = NULL;
500 int ret;
501
502 if (dsa != NULL) {
503 dupkey = ossl_dsa_dup(dsa, OSSL_KEYMGMT_SELECT_ALL);
504 if (dupkey == NULL)
505 return 0;
506 }
507
508 ret = EVP_PKEY_assign_DSA(to, dupkey);
509 if (!ret)
510 DSA_free(dupkey);
511 return ret;
512}
513
514/* NB these are sorted in pkey_id order, lowest first */
515
516const EVP_PKEY_ASN1_METHOD ossl_dsa_asn1_meths[5] = {
517
518 {
519 EVP_PKEY_DSA2,
520 EVP_PKEY_DSA,
521 ASN1_PKEY_ALIAS},
522
523 {
524 EVP_PKEY_DSA1,
525 EVP_PKEY_DSA,
526 ASN1_PKEY_ALIAS},
527
528 {
529 EVP_PKEY_DSA4,
530 EVP_PKEY_DSA,
531 ASN1_PKEY_ALIAS},
532
533 {
534 EVP_PKEY_DSA3,
535 EVP_PKEY_DSA,
536 ASN1_PKEY_ALIAS},
537
538 {
539 EVP_PKEY_DSA,
540 EVP_PKEY_DSA,
541 0,
542
543 "DSA",
544 "OpenSSL DSA method",
545
546 dsa_pub_decode,
547 dsa_pub_encode,
548 dsa_pub_cmp,
549 dsa_pub_print,
550
551 dsa_priv_decode,
552 dsa_priv_encode,
553 dsa_priv_print,
554
555 int_dsa_size,
556 dsa_bits,
557 dsa_security_bits,
558
559 dsa_param_decode,
560 dsa_param_encode,
561 dsa_missing_parameters,
562 dsa_copy_parameters,
563 dsa_cmp_parameters,
564 dsa_param_print,
565 dsa_sig_print,
566
567 int_dsa_free,
568 dsa_pkey_ctrl,
569 old_dsa_priv_decode,
570 old_dsa_priv_encode,
571
572 NULL, NULL, NULL,
573 NULL, NULL, NULL,
574 NULL, NULL, NULL, NULL,
575
576 dsa_pkey_dirty_cnt,
577 dsa_pkey_export_to,
578 dsa_pkey_import_from,
579 dsa_pkey_copy
580 }
581};
Note: See TracBrowser for help on using the repository browser.

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette